Be able to combine users who use multiple scanners as part of GMAU for Self-Hosted / Ping
We have multiple groups, such as groupstatic analysis and groupcomposition analysis who want to record GMAU and need to do this from multiple scanners. Today we collect number of distinct users for each scanner type, but we do not have a way to identify users who have used both scanners in a given time period. This means that we either double count those users and over-report GMAU or report the highest of the multiple scanner types, which under-reports GMAU.
Proposal
Take a distinct user count over multiple scanner types and reported metrics, so that a user is only counted once. This is similar to what we do for Secure SMAU.
Some concrete examples of this would be for groupcomposition analysis and the metrics reported for Container Scanning, Dependency Scanning, and License Management.
Note can currently be done for saas leveraging distinct against user-guids